Login Request a demo
Unscored severity · published Dec 31, 2003
CVE-2003-1509
Real Networks RealOne Enterprise Desktop 6.0.11.774, RealOne Player 2.0, and RealOne Player 6.0.11.818 through RealOne Player 6.0.11.853 allows remote attackers to execute…
–
CVSS
2.1%
EPSS
No
On KEV
Description
Real Networks RealOne Enterprise Desktop 6.0.11.774, RealOne Player 2.0, and RealOne Player 6.0.11.818 through RealOne Player 6.0.11.853 allows remote attackers to execute arbitrary script in the local security zone by embedding script in a temp file before the temp file is executed by the default web browser.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RE
Realone Enterprise Desktop · Realnetworks
6.0.11.774 · source: NVD
RP
Realone Player · Realnetworks
2.0; 6.0.11.818; 6.0.11.830; 6.0.11.841; 6.0.11.853 · source: NVD
Affected product
RE
Realone Enterprise Desktop
Realnetworks
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-1509
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-1509
service.real.com
http://service.real.com/help/faq/security/securityupdate_october2003.html
Patch
http://www.securityfocus.com/bid/8839
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/13445
More from Realone Enterprise Desktop
–
CVE-2004-1798
RealOne player 6.0.11.868 allows remote attackers to execute arbitrary script in the "My Computer" zone via a Synchronized Multimedia Integration Language (SMIL) presentation with…
–
CVE-2004-0258
Multiple buffer overflows in RealOne Player, RealOne Player 2.0, RealOne Enterprise Desktop, and RealPlayer Enterprise allow remote attackers to execute arbitrary code via…
–
CVE-2004-0273
Directory traversal vulnerability in RealOne Player, RealOne Player 2.0, and RealOne Enterprise Desktop allows remote attackers to upload arbitrary files via an RMP file that…
–
CVE-2003-0726
RealOne player allows remote attackers to execute arbitrary script in the "My Computer" zone via a SMIL presentation with a URL that references a scripting protocol, which is…
–
CVE-2003-0141
The PNG deflate algorithm in RealOne Player 6.0.11.x and earlier, RealPlayer 8/RealPlayer Plus 8 6.0.9.584, and other versions allows remote attackers to corrupt the heap and…